Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRobotic Process Automation As A Service (80b57742-6dcc-5d0b-b383-e0291604a6d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-35901 vulnerable 2026-06-08 06:06:28.104247 IBM Robotic Process Automation security bypass
LOW (2.7)
IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid changes or values in some fields. IBM X-Force ID: 259380.
Published: 2023-07-16T23:31:39.325Z
Updated: 2024-10-22T13:58:28.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35900 vulnerable 2026-06-08 06:06:28.101950 IBM Robotic Process Automation information disclosure
MEDIUM (4.3)
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368.
Published: 2023-07-19T00:58:53.912Z
Updated: 2024-10-21T14:09:24.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25680 vulnerable 2026-06-08 05:56:09.629245 IBM Robotic Process Automation information disclosure
MEDIUM (4.2)
IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032.
Published: 2023-03-15T19:42:46.825Z
Updated: 2025-02-26T20:16:33.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22863 vulnerable 2026-06-08 05:54:27.277254 IBM Robotic Process Automation information disclosure
MEDIUM (5.9)
IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not explicitly specified in the URL. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 244109.
Published: 2023-01-18T18:46:54.882Z
Updated: 2025-04-03T19:50:13.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22594 vulnerable 2026-06-08 05:54:26.538769 IBM Robotic Process Automation for Cloud Pak cross-site scripting
MEDIUM (4.6)
IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 244075.
Published: 2023-01-18T18:41:26.417Z
Updated: 2025-04-03T19:49:39.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22591 vulnerable 2026-06-08 05:54:26.534110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46773 vulnerable 2026-06-08 05:50:39.419532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43573 vulnerable 2026-06-08 05:49:33.568515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38710 vulnerable 2026-06-08 05:47:16.921941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36774 vulnerable 2026-06-08 05:46:07.736090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33953 vulnerable 2026-06-08 05:44:51.846292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22503 vulnerable 2026-06-08 05:40:53.868190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22502 vulnerable 2026-06-08 05:40:53.867616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22490 vulnerable 2026-06-08 05:40:53.842614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22433 vulnerable 2026-06-08 05:40:53.749395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22319 vulnerable 2026-06-08 05:40:08.207597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.